catch all snmp traps with general event

[zabbixx]

Hello all, aim noob at snmp traps
i read the wiki howto (http://www.zabbix.com/documentation/...types/snmptrap)

my problem is that i can't log the traps (cachall) with the snmptt.
If i enable the option to catch the unknown traps in snmptt.ini all traps goes to the unknown trap logfile,
but i need catch this trapps in the snmptt.conf to format this trap for zabbix.


here are my configs:

snmptrapd.conf

ignoreauthfailure no
disableAuthorization no
authCommunity log,execute,net public
traphandle default snmptt

snmptt.ini

[General]
snmptt_system_name =
mode = standalone
multiple_event = 1
dns_enable = 0
strip_domain = 0
strip_domain_list = <<END
domain.com
END

resolve_value_ip_addresses = 0
net_snmp_perl_enable = 1
net_snmp_perl_best_guess = 1
translate_log_trap_oid = 0
translate_value_oids = 1
translate_enterprise_oid_format = 1
translate_trap_oid_format = 1
translate_varname_oid_format = 1
translate_integers = 1

wildcard_expansion_separator = " "
allow_unsafe_regex = 0
remove_backslash_from_quotes = 0
dynamic_nodes = 0
description_mode = 0
description_clean = 1
threads_enable = 0
threads_max = 10
date_time_format = %H:%M:%S %Y/%m/%d

[DaemonMode]
daemon_fork = 1
daemon_uid = snmptt
pid_file = /var/run/snmptt.pid
spool_directory = /var/spool/snmptt/
sleep = 5
use_trap_time = 1
keep_unlogged_traps = 1
duplicate_trap_window = 0

[Logging]
stdout_enable = 0
log_enable = 1
log_file = /tmp/zabbix_traps.tmp
log_system_enable = 0
log_system_file = /var/log/snmptt/snmpttsystem.log
unknown_trap_log_enable = 0
unknown_trap_log_file = /var/log/snmptt/snmpttunknown.log
statistics_interval = 0
syslog_enable = 1
syslog_facility = local0

syslog_level_debug = <<END
END
syslog_level_info = <<END
END
syslog_level_notice = <<END
END
syslog_level_warning = <<END
END
syslog_level_err = <<END
END
syslog_level_crit = <<END
END
syslog_level_alert = <<END
END

syslog_level = warning
syslog_system_enable = 1
syslog_system_facility = local0
syslog_system_level = warning

[SQL]
db_translate_enterprise = 0
db_unknown_trap_format = '$-*'
sql_custom_columns = <<END
END
sql_custom_columns_unknown = <<END
END
mysql_dbi_enable = 0
mysql_dbi_host = localhost
mysql_dbi_port = 3306
mysql_dbi_database = snmptt
mysql_dbi_table = snmptt
mysql_dbi_table_unknown = snmptt_unknown
mysql_dbi_table_statistics =
mysql_dbi_username = snmpttuser
mysql_dbi_password = password
mysql_ping_on_insert = 1
mysql_ping_interval = 300
postgresql_dbi_enable = 0
postgresql_dbi_module = 0
postgresql_dbi_hostport_enable = 0
postgresql_dbi_host = localhost
postgresql_dbi_port = 5432
postgresql_dbi_database = snmptt
postgresql_dbi_table_unknown = snmptt_unknown
postgresql_dbi_table_statistics =
postgresql_dbi_table = snmptt
postgresql_dbi_username = snmpttuser
postgresql_dbi_password = password
postgresql_ping_on_insert = 1
postgresql_ping_interval = 300
dbd_odbc_enable = 0
dbd_odbc_dsn = snmptt
dbd_odbc_table = snmptt
dbd_odbc_table_unknown = snmptt_unknown
dbd_odbc_table_statistics =
dbd_odbc_username = snmptt
dbd_odbc_password = password
dbd_odbc_ping_on_insert = 1
dbd_odbc_ping_interval = 300

[Exec]
exec_enable = 1
pre_exec_enable = 1
unknown_trap_exec =
unknown_trap_exec_format =
exec_escape = 1

[Debugging]
DEBUGGING = 2
DEBUGGING_FILE = /var/log/snmptt/snmptt.debug
DEBUGGING_FILE_HANDLER = /var/log/snmptt/snmptthandler.debug

[TrapFiles]
snmptt_conf_files = <<END
/etc/snmp/snmptt.conf
END

snmptt.conf

EVENT general .* "General event" Normal
FORMAT ZBXTRAP $aA $ar

I starting the snmptrapd from the console with:

sudo snmptrapd -f -L o

now i send a test trap from second console:

sudo snmptrap -v 1 -c public localhost '.1.3.6.1.6.3.1.1.5.3' '0.0.0.0' 6 33 '55' .1.3.6.1.6.3.1.1.5.3 s “teststring000”

in the fist console i see this trap:

2012-08-16 11:42:41 0.0.0.0(via UDP: [127.0.0.1]:59792->[127.0.0.1]) TRAP, SNMP v1, community public
	iso.3.6.1.6.3.1.1.5.3 Enterprise Specific Trap (33) Uptime: 0:00:00.55
	iso.3.6.1.6.3.1.1.5.3 = Hex-STRING: E2 80 9C 74 65 73 74 73 74 72 69 6E 67 30 30 30 
E2 80 9D

and i do not understand why snmptt do not know this trap (general event is defined in snmptt.conf).... this trapp goes to unknown trap.

any ideas why it doenst work ?

[Dilbert]

try to run snmptrapd with -On option

[zabbixx]

try to run snmptrapd with -On option

THX, it works with the "-On" Parameter!